Google Professional Cloud Network Engineer Question 73
Single answerGoogle Cloud PlatformYour organization has two separate Google Cloud projects: Project-A and Project-B. They each have their own VPC networks. Project-A hosts an internal application in a private subnet, while Project-B needs to access this application over private IPs. Additionally, the internal application in Project-A should remain isolated from any other external networks. What is the best way to connect the two networks based on these requirements?
- A
Use VPC Network Peering to directly connect the VPC networks in Project-A and Project-B.
- B
Use Private Service Connect to expose the internal application in Project-A as a private service and allow Project-B to connect to it.
- C
Use a VPN connection between the two VPC networks to enable private communication.
- D
Use Cloud Interconnect to establish a dedicated connection between the two VPC networks.
Show answer and explanation
Correct answer: B
Explanation
Private Service Connect is the ideal solution for this scenario as it allows Project-A to expose only its internal application as a private service to Project-B, fulfilling the requirement of keeping the rest of Project-A's network isolated. It also ensures communication happens over private IPs, meeting the connectivity requirements.
- A. Incorrect.
Using VPC Network Peering would allow Project-B to communicate with Project-A over private IPs. However, it does not provide fine-grained control over which services are exposed, and it could potentially expose more of Project-A's network than is required, violating the isolation requirement.
- B. Correct.
Private Service Connect is the best solution here. It allows Project-A to expose the internal application as a private service, while Project-B can connect to it over private IPs without compromising the isolation of the rest of Project-A's network.
- C. Incorrect.
A VPN connection is not needed in this scenario because both VPCs are within Google Cloud. VPNs are typically used to connect on-premises networks to VPCs or for hybrid connectivity.
- D. Incorrect.
Cloud Interconnect is designed for high-bandwidth, low-latency connectivity between on-premises data centers and Google Cloud, not for connecting VPC networks within Google Cloud.